Micro Focus · Operation Bridge Reporter (OBR)

CVE-2021-22502

Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability

Exploited in attacks Critical 9.8 Attack chance: 97%

What it is

Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. The vulnerability could be exploited to allow Remote Code Execution on the OBR server.

CISA: Micro Focus Operation Bridge Report (OBR) contains an unspecified vulnerability that allows for remote code execution.

What to do

Apply updates per vendor instructions.

Deadline for US federal agencies: November 17, 2021

Added to the CISA list: November 3, 2021
Published: February 8, 2021
Severity: Critical 9.8 CVSS 3.1
Chance of attacks in the next 30 days (EPSS): 97% in the top 0.1% of all known vulnerabilities
Weakness: CWE-20 CWE-78
More details: NVD · CVE.org · CISA

All references (4)

More exploited flaws from Micro Focus

Added	Vulnerability	Product	Severity	Attack chance
Nov 3, 2021	Access Manager Information LeakageCVE-2021-22506	Micro Focus Access Manager	High 7.5	26%

All of them →

Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.